After a Scam

Scam Recovery Scams

Fraudsters recontact people who have already lost money and promise recovery in exchange for upfront fees.

Understand the pattern

How this scam operates

After an initial loss, a new caller, investigator, lawyer, or recovery service claims it can retrieve the money. The approach may use details from the original scam to appear credible. Upfront fees, taxes, wallet access, or further personal information are requested, but the promised recovery does not occur.

Details can vary, but the goal is usually to create enough trust, fear, or urgency that you act before verifying the story. Caller ID, profile names, logos, and polished websites can all be copied.

A useful ruleEnd the original contact. Then find the organization or person independently and ask whether the claim is genuine.

What the scammer wants

Money, payment details, personal information, or an action that removes normal payment protections.

Common tactics

Unexpected contact, urgency, copied identities or websites, unusual payment methods, and resistance to independent checks.

Recognize the pressure

Warning signs to look for

High risk

Guaranteed recovery

An unsolicited service promises to recover prior losses for an advance fee.

High risk

Fees required to withdraw

More money, tax, or insurance is demanded before supposed funds can be released.

Notice

Unexpected contact

The conversation begins through an unsolicited call, message, email, or pop-up.

Take back control

What to do next

Take protective action even if you are not yet certain this is a scam.

  1. immediate response

    Reject advance recovery fees

    Do not pay; report the approach and contact the original payment provider directly.

  2. Immediate response

    Preserve evidence and secure access

    Save messages, receipts, account names, URLs, and transaction details. If credentials were exposed, change them from a trusted device and review active sessions.

How to protect yourself

Pause unexpected requests involving money, codes, documents, or account access. Leave the original conversation and verify the claim using an official app, a known website, or a number from a statement or card. Do not rely on caller ID, profile names, or links supplied by the sender.

If you were affected

Stop contact and further payments. Contact the bank, payment service, marketplace, or platform through its official channel. Secure exposed accounts from a trusted device, preserve messages and transaction records, and report through the appropriate official service. Watch for follow-up recovery scams.

Open the recovery checklist

Related practical guides

Recovery

What to Do If You Sent Money to a Scammer

Immediate steps for contacting a payment provider, protecting accounts, and preserving evidence.

7 minute read

Read this guide
Verified destinations

Official help and reporting

Choose the service for your location. External links open the organization’s official website.

United States

ReportFraud.ftc.gov

Federal Trade Commission

Official United States service for reporting fraud, scams, and bad business practices.

Visit official site for ReportFraud.ftc.gov
United Kingdom

Action Fraud

City of London Police

The United Kingdom’s national reporting centre for fraud and cybercrime.

Phone: 0300 123 2040

Visit official site for Action Fraud
Canada

Canadian Anti-Fraud Centre

Royal Canadian Mounted Police, Ontario Provincial Police, and Competition Bureau Canada

Canada’s central service for information about fraud and for reporting fraud and cybercrime.

Phone: 1-888-495-8501

Visit official site for Canadian Anti-Fraud Centre
Australia

Scamwatch

National Anti-Scam Centre

Australian government information and reporting guidance about scams.

Visit official site for Scamwatch

Investment and Cryptocurrency Scams

Fraudulent opportunities use fabricated returns, manipulated dashboards, and urgency to obtain deposits.

Read related guide

Questions about Scam Recovery Scams

How can I tell whether a recovery service is legitimate?

Be cautious of unsolicited contact, guaranteed recovery, secrecy, and upfront fees. Independently verify any organization.